diff --git a/crmeb/app/adminapi/controller/v1/file/SystemAttachment.php b/crmeb/app/adminapi/controller/v1/file/SystemAttachment.php
index ef6a44781..e2110d8d2 100644
--- a/crmeb/app/adminapi/controller/v1/file/SystemAttachment.php
+++ b/crmeb/app/adminapi/controller/v1/file/SystemAttachment.php
@@ -151,7 +151,7 @@ class SystemAttachment extends AuthController
         ], true);
         $uploadToken = md5(time());
         $this->service->cacheDriver()->set('scan_upload', $uploadToken, 600);
-        $url = sys_config('site_url') . '/app/upload?token=' . $uploadToken . '&pid=' . $pid;
+        $url = sys_config('site_url') . '/app/upload?pid' . $pid . '&token=' . $uploadToken;
         return app('json')->success(['url' => $url]);
     }